This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer File: yxTTDzseETdCPEsjWVfzMDBk2v8.cer (raw, json) Hash identifier: jJjZ0cZe1gVxEr/aN9oVtps+6LCzVF0ZbQ0598RAX6k= Subject key identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB72B004B7BFB73E58ED3C97ADF525 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57710 IP: 37.61.160.0/20 IP: 185.235.200.0/22 IP: 2a00:9640::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:72:b0:04:b7:bf:b7:3e:58:ed:3c:97:ad:f5:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb14d30f3b1e1137423c4b235957f3303064daff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cf:b7:9c:9d:7f:a2:99:a1:b0:35:95:17:c2: 96:5f:ea:10:83:a7:cd:e5:61:28:44:69:60:5a:16: 39:4a:47:75:24:4c:8a:50:68:3d:d9:7e:5f:00:78: 62:50:cf:fd:e5:cd:24:f1:81:43:25:c5:ed:7a:ce: 1a:c1:81:71:4b:5d:ea:7c:ae:08:ab:3d:67:b3:0b: 7f:6b:73:d5:3e:39:d7:dc:62:8d:ca:01:35:13:12: 02:42:81:be:57:05:36:e5:41:d1:3b:16:85:1f:b5: f9:82:1d:dc:b0:9f:8e:79:9f:5b:4d:44:f5:a5:40: 8f:bf:c1:8b:2e:ae:13:da:c1:66:d4:cf:ce:b8:e0: 59:d7:d5:20:16:5b:07:69:5d:8d:de:7a:91:de:f8: 4b:96:c8:17:c1:7f:3e:d4:16:10:25:c3:22:fb:b3: 0a:8a:28:7c:33:15:9f:2a:07:ab:26:94:b7:69:69: c3:e6:4f:cd:a9:66:13:a0:9d:44:8a:50:06:2a:30: 0c:3a:97:b6:b2:4e:18:70:ab:bf:5d:38:80:35:92: fb:85:26:29:2d:90:18:87:9a:5f:0d:7e:e7:7d:80: a9:29:30:b8:e7:3e:ef:43:6a:6d:7a:34:75:51:fb: e6:10:7e:ec:3b:28:ce:62:4f:82:92:c7:d0:75:2a: fd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.61.160.0/20 185.235.200.0/22 IPv6: 2a00:9640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57710 Signature Algorithm: sha256WithRSAEncryption 37:73:4b:f1:99:49:82:23:c0:2b:1d:e9:fb:3f:1a:d9:32:9f: b6:50:a7:d2:c7:7e:f0:0e:70:ad:26:e6:cd:44:53:4b:e0:e6: 72:a9:05:99:de:b8:53:28:9e:59:10:76:0e:3a:e3:3f:8d:83: ff:2e:15:c8:6e:7a:42:9f:0c:26:6a:1a:3c:83:c2:07:4f:a9: e5:68:be:50:50:cf:e8:c8:40:14:4e:fb:b9:16:5c:51:0e:7f: ec:f1:f4:e5:ea:eb:d5:ad:56:fa:46:e0:48:84:95:5c:ba:e1: 2a:ad:71:6d:da:ce:1d:b1:37:46:94:3c:38:3b:97:8d:ff:82: ed:de:1a:99:f4:b7:f4:8a:e2:1e:de:06:c7:9d:7b:bf:93:6f: 2f:d0:92:17:86:cb:6f:5c:c3:ea:a2:c9:cf:71:84:8e:7b:0f: fe:f7:25:f5:c7:91:59:f2:ee:0a:22:5d:da:56:a8:28:45:4a: 09:e6:78:6e:e7:5f:68:a5:9d:1d:10:81:a7:5f:21:c6:2a:dd: ae:10:15:3b:32:ad:62:59:f6:e3:26:ec:e1:ba:68:fd:c4:b4: bb:47:0f:55:d0:e0:53:73:83:f0:7b:38:b5:9f:1e:0c:c7:b3: 6a:b4:0a:7b:d2:ad:5a:40:a3:c2:b3:9d:3d:1c:ca:cf:00:c9: f9:aa:2c:98 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt263KwBLe/tz5Y7TyXrfUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjE0ZDMwZjNiMWUxMTM3NDIzYzRiMjM1OTU3ZjMzMDMwNjRkYWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s+3nJ1/opmhsDWVF8KWX+oQg6fN 5WEoRGlgWhY5Skd1JEyKUGg92X5fAHhiUM/95c0k8YFDJcXtes4awYFxS13qfK4I qz1nswt/a3PVPjnX3GKNygE1ExICQoG+VwU25UHROxaFH7X5gh3csJ+OeZ9bTUT1 pUCPv8GLLq4T2sFm1M/OuOBZ19UgFlsHaV2N3nqR3vhLlsgXwX8+1BYQJcMi+7MK iih8MxWfKgerJpS3aWnD5k/NqWYToJ1EilAGKjAMOpe2sk4YcKu/XTiANZL7hSYp LZAYh5pfDX7nfYCpKTC45z7vQ2ptejR1UfvmEH7sOyjOYk+CksfQdSr92QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFMsU0w87HhE3QjxLI1lX8zAwZNr/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4LzI2N2Jm NS0wMjIwLTQ4YjEtYjcyMy1hNWFlNWIxOTkzOWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvMjY3YmY1 LTAyMjAtNDhiMS1iNzIzLWE1YWU1YjE5OTM5YS8xL3l4VFREenNlRVRkQ1BFc2pX VmZ6TURCazJ2OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEJT2gAwQCuevIMA0EAgACMAcDBQAqAJZAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDhbjANBgkqhkiG9w0BAQsFAAOCAQEAN3NL 8ZlJgiPAKx3p+z8a2TKftlCn0sd+8A5wrSbmzURTS+DmcqkFmd64UyieWRB2Djrj P42D/y4VyG56Qp8MJmoaPIPCB0+p5Wi+UFDP6MhAFE77uRZcUQ5/7PH05err1a1W +kbgSISVXLrhKq1xbdrOHbE3RpQ8ODuXjf+C7d4amfS39IriHt4Gx517v5NvL9CS F4bLb1zD6qLJz3GEjnsP/vcl9ceRWfLuCiJd2laoKEVKCeZ4budfaKWdHRCBp18h xirdrhAVOzKtYln24ybs4bpo/cS0u0cPVdDgU3OD8Hs4tZ8eDMezarQKe9KtWkCj wrOdPRzKzwDJ+aosmA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:35 2026 by rpki-client